CVE-2012-2142

Опубликовано: 09 янв. 2020

Источник: nvd

CVSS3: 7.8

CVSS2: 6.8

EPSS Низкий

Описание

The error function in Error.cc in poppler before 0.21.4 allows remote attackers to execute arbitrary commands via a PDF containing an escape sequence for a terminal emulator.

Ссылки

http://cgit.freedesktop.org/poppler/poppler/commit/?id=71bad47ed6a36d825b0d08992c8db56845c71e40
Patch
Vendor Advisory
http://cgit.freedesktop.org/poppler/poppler/commit/NEWS?id=2bc48d5369f1dbecfc4db2878f33bdeb80d8d90f
Patch
Vendor Advisory
http://lists.opensuse.org/opensuse-updates/2013-08/msg00049.html
Mailing List
Patch
Third Party Advisory
http://www.openwall.com/lists/oss-security/2013/08/09/5
Exploit
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2013/08/09/6
Exploit
Mailing List
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=789936
Issue Tracking
Third Party Advisory
http://cgit.freedesktop.org/poppler/poppler/commit/?id=71bad47ed6a36d825b0d08992c8db56845c71e40
Patch
Vendor Advisory
http://cgit.freedesktop.org/poppler/poppler/commit/NEWS?id=2bc48d5369f1dbecfc4db2878f33bdeb80d8d90f
Patch
Vendor Advisory
http://lists.opensuse.org/opensuse-updates/2013-08/msg00049.html
Mailing List
Patch
Third Party Advisory
http://www.openwall.com/lists/oss-security/2013/08/09/5
Exploit
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2013/08/09/6
Exploit
Mailing List
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=789936
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:freedesktop:poppler:*:*:*:*:*:*:*:*

Версия до 0.21.4 (исключая)

Конфигурация 2

cpe:2.3:a:xpdfreader:xpdf:3.02:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*

Конфигурация 4

cpe:2.3:o:opensuse:opensuse:12.2:*:*:*:*:*:*:*

EPSS

Процентиль: 80%

0.01333

Низкий

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2012-2142

CVSS3: 7.8

ubuntu

около 6 лет назад

The error function in Error.cc in poppler before 0.21.4 allows remote attackers to execute arbitrary commands via a PDF containing an escape sequence for a terminal emulator.

CVE-2012-2142

redhat

больше 12 лет назад

The error function in Error.cc in poppler before 0.21.4 allows remote attackers to execute arbitrary commands via a PDF containing an escape sequence for a terminal emulator.

CVE-2012-2142

CVSS3: 7.8

debian

около 6 лет назад

The error function in Error.cc in poppler before 0.21.4 allows remote ...

GHSA-pwcf-7grp-gwmj

github

почти 4 года назад

The error function in Error.cc in poppler before 0.21.4 allows remote attackers to execute arbitrary commands via a PDF containing an escape sequence for a terminal emulator.

EPSS

Процентиль: 80%

0.01333

Низкий

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

NVD-CWE-Other